Unexpected Windows bloat is due to bug, not by design
Mystery of the disappearing storage solved (for some)
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations
The "Rogue Agent" vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and compromise every Dialogflow CX agent within the same Goog…
DuckDuckGo browser now blocks YouTube video ads
DuckDuckGo announced that its browser can now block most video ads on YouTube, including those shown before the video starts playing and during playback. [...]
GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures
New research shows that a signed Git commit's hash is not the one-of-a-kind name that much of the software world assumes it to be. Given any signed commit, someone without the sign…
Telstra outage: Failed emergency services calls, train chaos, payment systems down
Telco says issues all sorted, but transport networks expected to be disrupted well into Thursday
Tech divorce from Walmart cost Brit retail giant Asda £1.22B
Project which included new SAP system saw delays and costs rise from an £800m estimate while causing financial disruptions
The Verification Step Is the New ATO Battleground in 2026
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools, and waited for matches. Credential s…
Telco giant KDDI says data breach affects over 12 million people
Japanese telecommunications giant KDDI says that millions of people had their email addresses and passwords exposed after attackers breached an email platform used by five internet…
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code
An AI coding assistant that refuses to answer a dangerous request in its chat box can answer it anyway if the same request is broken into small, ordinary-looking steps inside a cod…
Cybersecurity and the Gap Between Skill and Ability
Last week, national security agencies from the Five Eyes—that’s the rich, English-language-speaking countries club—jointly released a statement warning of the increasing cyber risk…
Clingy Virgin Media fined £28M for refusing to take the hint
Ofcom: Telco encouraged staff to drop calls and put customers on hold for no reason when they wanted to cancel
CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agenci…
Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection
Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. The post Cri…
Another German state heads down the open source sovereignty road
Mecklenburg-Vorpommern ditches SharePoint while Bavaria also mulls Microsoft alternatives
CISA orders feds to prioritize patching Langflow auth bypass flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively exploited vulnerability in the Langflow visual framework fo…
Home Office's glitchy eVisa rollout lands UK privacy regulator in campaigners' crosshairs
Coalition says ICO failed to act despite hundreds of complaints about bug-plagued digital immigration status scheme
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking de…
NHS told to show its working on Palantir platform benefits
Campaigners say ministers repeated claims about FDP despite an admission that the data does not prove cause and effect
Ubiquiti warns of new max severity UniFi OS vulnerability
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks. [.…
State IDs for AI Agents: Will Estonia Set a Precedent?
The world's digital testing ground plans to help people use AI agents for government purposes.
AI's biggest challenge is not compute - it's data storage
SPONSORED FEATURE: As AI evolves from novelty to autonomy, the real bottleneck isn't processing power—it's where to put all that data.
CISA orders feds to patch max severity ColdFusion flaw by Friday
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commer…
AI is becoming a bargain hunter's market, with a few luxury models on top
Inference is become a commodity except for frontier models
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has …
Media Over QUIC can scale real-time streaming and carry the world's vids
With the low latency of WebRTC and the scalability of DASH
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of activ…
Microsoft intros tech that rebuilds dead PCs without requiring local copies of Windows
No USB stick required if your Win 11 box has a pulse and a network driver
SpaceXAI wants to compete on AI infrastructure, not just AI models
SpaceX is best known for its outer space and rocket projects, while xAI has largely been focused on its flagship AI assistant, Grok. These are two very different paths, but now …
Accenture confirms breach after hacker offers stolen data for sale
IT services giant Accenture has confirmed it suffered a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company. [...]
Big Brand Jobs Scam Targets Marketing Pros' Google Accounts
The phishing campaign uses several tactics, including nested redirects, to evade detection and steal credentials from unsuspecting targets.